diff options
| author | Ermal Luçi <eri@pfsense.org> | 2008-05-19 22:02:09 +0000 |
|---|---|---|
| committer | Ermal Luçi <eri@pfsense.org> | 2008-05-19 22:02:09 +0000 |
| commit | 56735ce3af89a9e39ad0e3defd7245e1c8b87535 (patch) | |
| tree | 18665743311e1e73cb0cbec05c89b4eb37fed311 /etc/inc/captiveportal.inc | |
| parent | 194d9340db9e158c9dfe2cacab96a62951e3e3b5 (diff) | |
| download | pfsense-56735ce3af89a9e39ad0e3defd7245e1c8b87535.zip pfsense-56735ce3af89a9e39ad0e3defd7245e1c8b87535.tar.gz | |
Make Captive Portal Multi-Wan safe/compatible.
Diffstat (limited to 'etc/inc/captiveportal.inc')
| -rw-r--r-- | etc/inc/captiveportal.inc | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/etc/inc/captiveportal.inc b/etc/inc/captiveportal.inc index 0d4cbfe..b8f8887 100644 --- a/etc/inc/captiveportal.inc +++ b/etc/inc/captiveportal.inc @@ -65,6 +65,14 @@ function captiveportal_configure() { /* make sure ipfw is loaded */ mwexec("/sbin/kldload ipfw"); + + /* + * make sure ipfw is the first hook to make CP work correctly on + * Multi-WAN. + * Disable the ipfw outer hook it has not value to us. + */ + mwexec("/sbin/sysctl net.inet.ip.pfil.inbound=\"ipfw,pf\""); + mwexec("/sbin/sysctl net.inet.ip.pfil.outbound=\"pf\""); /* stop accounting on all clients */ captiveportal_radius_stop_all(); @@ -1120,4 +1128,4 @@ function portal_mac_fixed($clientmac) { return FALSE ; } -?>
\ No newline at end of file +?> |
